Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

joomla joomla! 3.7.2 vulnerabilities and exploits

(subscribe to this query)
3.7
CVSSv3

CVE-2017-14595

In Joomla! prior to 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.
Joomla Joomla! 3.7.3Joomla Joomla! 3.7.0Joomla Joomla! 3.7.2Joomla Joomla! 3.7.1Joomla Joomla! 3.7.4Joomla Joomla! 3.7.5
7.5
CVSSv3

CVE-2017-9933

Improper cache invalidation in Joomla! CMS 1.7.3 up to and including 3.7.2 leads to disclosure of form contents.
Joomla Joomla! 3.7.0Joomla Joomla! 3.4.0Joomla Joomla! 3.5.0Joomla Joomla! 2.5.19Joomla Joomla! 3.6.0Joomla Joomla! 2.5.7Joomla Joomla! 2.5.17Joomla Joomla! 3.1.4Joomla Joomla! 3.1.3Joomla Joomla! 3.3.3Joomla Joomla! 2.5.25Joomla Joomla! 3.2.1Joomla Joomla! 3.3.5Joomla Joomla! 2.5.22Joomla Joomla! 3.4.4Joomla Joomla! 3.7.1Joomla Joomla! 3.4.1Joomla Joomla! 3.3.4Joomla Joomla! 2.5.8Joomla Joomla! 3.6.1Joomla Joomla! 3.1.5Joomla Joomla! 3.1.1
6.1
CVSSv3

CVE-2017-9934

Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 up to and including 3.7.2 lead to an XSS vulnerability.
Joomla Joomla! 3.4.0Joomla Joomla! 3.5.0Joomla Joomla! 2.5.19Joomla Joomla! 3.6.0Joomla Joomla! 2.5.7Joomla Joomla! 2.5.17Joomla Joomla! 3.1.4Joomla Joomla! 3.1.3Joomla Joomla! 3.3.3Joomla Joomla! 3.7.0Joomla Joomla! 2.5.25Joomla Joomla! 3.2.1Joomla Joomla! 3.3.5Joomla Joomla! 2.5.22Joomla Joomla! 3.4.4Joomla Joomla! 3.4.1Joomla Joomla! 3.3.4Joomla Joomla! 2.5.8Joomla Joomla! 3.6.1Joomla Joomla! 3.1.5Joomla Joomla! 3.1.1Joomla Joomla! 3.7.2
6.1
CVSSv3

CVE-2017-11612

In Joomla! prior to 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components.
Joomla Joomla! 3.4.0Joomla Joomla! 3.5.0Joomla Joomla! 1.6Joomla Joomla! 1.6.4Joomla Joomla! 2.5.19Joomla Joomla! 3.6.0Joomla Joomla! 2.5.7Joomla Joomla! 3.7.3Joomla Joomla! 2.5.17Joomla Joomla! 1.5.24Joomla Joomla! 3.1.4Joomla Joomla! 3.1.3Joomla Joomla! 1.7.1Joomla Joomla! 3.3.3Joomla Joomla! 3.7.0Joomla Joomla! 2.5.25Joomla Joomla! 1.5.26Joomla Joomla! 1.5.11Joomla Joomla! 3.2.1Joomla Joomla! 1.5.25Joomla Joomla! 1.6.3Joomla Joomla! 3.3.5
9.8
CVSSv3

CVE-2017-14596

In Joomla! prior to 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.
Joomla Joomla! 1.6.4Joomla Joomla! 2.5.19Joomla Joomla! 2.5.7Joomla Joomla! 3.7.3Joomla Joomla! 2.5.17Joomla Joomla! 1.5.24Joomla Joomla! 3.1.4Joomla Joomla! 3.1.3Joomla Joomla! 1.7.1Joomla Joomla! 3.3.3Joomla Joomla! 3.7.0Joomla Joomla! 2.5.25Joomla Joomla! 1.5.26Joomla Joomla! 1.5.11Joomla Joomla! 3.2.1Joomla Joomla! 1.5.25Joomla Joomla! 1.6.3Joomla Joomla! 3.3.5Joomla Joomla! 1.5.13Joomla Joomla! 2.5.22Joomla Joomla! 3.4.4Joomla Joomla! 1.5.3
8.8
CVSSv3

CVE-2017-11364

The CMS installer in Joomla! prior to 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs.
Joomla Joomla! 1.0.5Joomla Joomla! 3.4.0Joomla Joomla! 3.5.0Joomla Joomla! 1.6Joomla Joomla! 1.6.4Joomla Joomla! 2.5.19Joomla Joomla! 3.6.0Joomla Joomla! 2.5.7Joomla Joomla! 3.7.3Joomla Joomla! 2.5.17Joomla Joomla! 1.5.24Joomla Joomla! 3.1.4Joomla Joomla! 3.1.3Joomla Joomla! 1.7.1Joomla Joomla! 3.3.3Joomla Joomla! 3.7.0Joomla Joomla! 2.5.25Joomla Joomla! 1.0.9Joomla Joomla! 1.5.26Joomla Joomla! 1.5.11Joomla Joomla! 3.2.1Joomla Joomla! 1.5.25
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28995CVE-2024-36680CVE-2024-35537unauthorizedCVE-2024-21518CVE-2024-37673cross-site scriptingSSRFCVE-2024-6241
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook